Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

23.6 NDS Error, System Failure (-632) Occurs
When Doing ldapsearch for the User Objects
Import the user objects with simple password and then enable universal password for the container
where the user objects are imported. Stop the DS server and set the environment as
NDSD_TRY_NMASLOGIN_FIRST=true and then start DS Server. Then when you do and
ldapsearch for the user objects, which were imported with simple password, you get the following
error:
novdocx (en) 22 June 2009
ldap_bind: Unknown error, additional info: NDS error: system failure (-632)
To resolve this issue, set the default login sequence as simple password for the container where user
objects are imported before doing ldapsearch for those user objects.
When LDAP requests NMAS to log in a user, NMAS uses the default login sequence. If you do not
specify a default login sequence for these users, then it will use the NDS sequence. If these users are
not given an NDS password when you imported them, then the NDS sequence will not work. If you
enable universal password, then the simple password will be synchronized with the NDS password
and universal password when the user logs in with the simple password.
23.7 Disabling SecretStore
An eDirectory administrator can disable SecretStore using the following processes:
23.7.1 On Linix and UNIX
1 Go to the nds-modules directory and rename or move the following SecretStore modules:
libsss.so*
libssncp.so.*
libssldp.so.*
2 Restart the server.
Alternatively, you can also comment out the line in the /etc/opt/novell/eDirectory/conf/
ndsmodules.conf file that loads ssncp.
23.7.2 On NetWare
1 Go to the system directory and rename or move the following SecretStore modules:
lsss.nlm
sss.nlm
ssncp.nlm
ssldp.nlm
2 Restart the server
Alternatively, you can also comment out the line in the autoexec.ncf file that loads ssncp.
112 Novell eDirectory 8.8 Troubleshooting Guide